UbuntuUpdates.org

Package "libheif"

Name: libheif

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • ISO/IEC 23008-12:2017 HEIF file format decoder - development files
  • ISO/IEC 23008-12:2017 HEIF file format decoder - dav1d plugin
  • ISO/IEC 23008-12:2017 HEIF file format decoder - ffmpegdec plugin
  • ISO/IEC 23008-12:2017 HEIF file format decoder - j2kdec plugin
Latest version: 1.17.6-1ubuntu4.1
Release: noble (24.04)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "libheif" in Noble

Repository Area Version
base universe 1.17.6-1ubuntu4
base main 1.17.6-1ubuntu4
security main 1.17.6-1ubuntu4.1
updates main 1.17.6-1ubuntu4.1
updates universe 1.17.6-1ubuntu4.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.17.6-1ubuntu4.1 2024-10-23 12:08:16 UTC

  libheif (1.17.6-1ubuntu4.1) noble-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds data read/write in ImageOverlay::parse()
    - debian/patches/CVE-2024-41311.patch: added patch to check that
      overlay's offsets are valid
    - CVE-2024-41311

 -- Shishir Subedi <email address hidden> Mon, 21 Oct 2024 16:33:55 +0545
CVE-2024-41311 In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an o


About   -   Send Feedback to @ubuntu_updates